CVE-2017-15685

Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE)

published November 27, 2020

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01689 · 76.9th percentile
Published
2020-11-27T17:26Z
EPSS history
Timeline
  • 27 NOV 17:26Z
    Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE)
    cvelistv5